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REMARKS/ARGUMENTS 

Claims 1-16 remain pending in this U.S. Patent Application No. 09/759,402 
(hereinafter, the !M 402 Application"), and currently stand rejected. It is believed that the 
remarks submitted herein below attend to each of the Examiner's rejections of claims I— 
16. 

Claim Rejections - 35 U.S.C, §102 

Claims 1-16 stand rejected under 35 U.S*C § 102(e) as being anticipated by U.S. 
Patent No. 6 3 578 B 01 8 (hereinafter, "Ulyanov"). We respectfully disagree and traverse (he 
Examiner's rejection. 

To anticipate a claim, Ulyanov must teach every element of the claim and "the 
identical invention must be shown in as complete detail as contained in the ... claim." 
MPEP 2131 citing Verdegaal Bros. V. Union Oil Co. of California, 814 F.2d 628, 2 
USPQ2d 1051 (Fed. Cir, 1987) and Richardson v. Suzuki Motor Co., 868 F.2d 1226, 9 
USPQ2d 1913 (Fed. Cir. 1989). However, Ulyanov cannot be said to anticipate 
Applicant's invention, because Ulyanov does not teach every element of Applicant's 
claims 1-16, as demonstrated herein below. 

Independent Claims 1 and 15: 

Independent claim 1 recites a method for encrypting programs for encrypted 
execution on a network having a remote host computer. Claim 15 recites a secured 
network for executing encrypted computer programs at a remote host computer without 
sharing intelligible or otherwise useful program code, computations or data associated 
with execution. Claims 1 and 15 share the following elements: 

(a) encoding a program as a unitary matrix with n rows and n columns; 

(b) encoding an input data string to the program as a vector of length n, wherein 

execution of the program on the input data string is realized by matrix 
multiplication of the unitary matrix with the vector; 

(c) loading the encoded program and the encoded data string (with/on) a host 

computer; 
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(d) executing the encoded program, using the encoded data string (with/on) the 

host computer; 

(e) communicating results from a host computer to: 

• a control computer (claim 1) or 

• a network (claim 1 5), and 

(f) decoding the results: 

• into output representative of executing the program with the data 
string, wherein computations and data associated with the program and 
data string are unintelligible and useless at the host computer (claim 
1), or 

• where the host computer has substantially no intelligible or otherwise 
useful program code, computations or data associated with execution 
of the program (claim 15). 

Ulyanov fails to teach each and every one of claim elements (a)-(f), and therefore cannot 
anticipate claims I and 15. 

Before specifically addressing the claim elements, we must point out that Ulyanov 
is fundamentally different from Applicant's claimed invention, because Ulyanov does not 
recite or even suggest encrypting programs for encrypted execution on a network having 
a remote host computer. Ulyanov is completely silent as to encryption, especially 
encrypted execution on a network such as Applicant's. The only networks mentioned by 
Ulyanov are a fuzzy neural network and a quantum network (e.g., a model of quantum 
computation), both of which are different from Applicant's network, which can be "the 
Internet, a virtual private network, LAN or other network, wired or wireless, connecting 
computing devices together" Specification p. 6, lines 1-2, emphasis added. For 
example, Ulyanov recites: 

"In the quantum networks model, each unitary operator is modeled 
as a quantum logic gate that affects one, two, or more quantum bits 
(qubits). Qubits exist in a superposition of states, thus, quantum 
logic gates operate on qubits by operating on all states in the 
superposition simultaneously.. .The term quantum logic gate is 
simply a schematic way to represent the time evolution of a 
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quantum system. The term "gates" is not meant to imply that 
quantum computation can be physically realized in a manner 
similar to classical logic networks,) " Ulyanov col. 8, lines 53-65. 

Furthermore, Ulyanov is concerned with the encoding of functions, and not the 

encryption of a computer program. Ulyanov recites encoding a function that is 

essentially a table, and attempts to show how to build a quantum computer capable of 

computing the table. For example, 

»...an input 801, describing the function / is provided to an encoder 
802, An output of the encoder 802 is an operator U/ 803. The 
operator 803 is provided to a quantum block 804. An output of the 
quantum block 804 is a set of basis vectors 805. The basis vectors 
805 are provided to a decoder 806, An answer 807 is provided as 
an output of the decoder 806. The input 801 and output 807 make 
up a binary string layer. The encoder 802 and decoder 806 make 
up a map table and interpretation space level. The operator 803, the 
quantum block 804, and the basis vectors 805 exist in a complex 
Hilbert space." Ulyanov col. 13, lines 50-60; FIG. 8. See also 
Ulyanov col. 16, lines 1- 

element fa) : Turning now to the specific elements of claims 1 and 15, we first 
note that contrary to the Examiner's statement, Ulyanov does not disclose encoding a 
program as a unitary matrix with n rows and n columns. Respectfully, Ulyanov col. 13, 
line 61 — col. 14, line 6 (cited to support the Examiner's position) merely summarizes the 
well known paper by David Deutsch, "Quantum Theory, the Church-Turing principle and 
the universal quantum computer," Proc. Royal Soc. of London A, vol. 400, 1985, pp. 97- 
1 14, attached hereto as Appendix A. This paper is credited for initiating the study of how 
to make quantum computers. However, neither the Deutsch article nor Ulyanov discuss 
encoding a program as a unitary matrix with n rows and n columns, as a step in 
encrypting a program for encrypted execution. 

As noted above, Ulyanov does not encrypt programs. Neither does Ulyanov teach 
encoding programs, as specified in claim 1 . Rather, Ulyanov recites encoding and 
decoding with respect to functions. As is known in the art, a function is essentially a 
compact description of the relationship of one field, relative to the other. See, e.g., 
Ulyanov col. 16, lines 1-10. A function may for example be calculated usin* a program, 
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but it is quite different from a program, which is commonly recognized as a set or 
sequence of instructions to be performed by a computer. 

element (b) \ Also contrary to the Examiner's assertion, Ulyanov fails to teach 
encoding an input data string to a general program as a vector of length u, in the context 
of encryption, as is required in claims 1 and 15. The Examiner cites Ulyanov col 16, line 
1 - col, 17, line 67 as support for his position. However, this passage recites 
development of a quantum gate in order "to show the structure of matrix operator U>\" 
Ulyanov, col. 15, lines 56-57. In particular, the cited passage describes encoding a 
function /into an injective function F y then encoding F into a U>map table, then 
calculating a corresponding matrix operator for each U/7, Encoding a function into 
another function and then into a table is different from encoding an input data string to a 
program, especially when taken as a part of Applicant's encryption method. Furthermore, 
Ulyanov specifies: "The term "gates" is not meant to imply that quantum computation 
can be physically realized in a manner similar to classical logic networks." Ulyanov col. 
8, lines 63-65. 

element (c) \ Because Ulyanov does not teach encoding a program, especially as 
a step in a method for encrypting programs, Ulyanov cannot teach loading such an 
encoded program and such an encoded data string (with/on) a host computer. The 
Examiner states that such element is disclosed at col. 16, lines 1- col. 17, line 67. 
Respectfully, this section illustrates use of the Deutsch-Joza algorithm (which "is stated 

as: given a constant or balanced function / : {0,l}' J -> {0,1}, decide if/is constant or 
balanced." Ulyanov col. 15, lines 58-60), in the special case where n-2. The cited 
section mentions nothing of loading an encoded program/data string on a host computer. 
See also "Quantum Theory, the Church-Turing principle and the universal quantum 
computer/' attached hereto as Appendix A. 

element (d) : The Examiner points to the same section from Ulyanov (col. 16, 
lines 1- col 17, line 67) in an attempt to show anticipation of element (d): executing an 
encoded program, using the encoded data string, on the host computer. Respectfully, the 
passage cited by the Examiner says nothing about executing a program, but rather 
describes development of a quantum gate. 
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element (eh The Examiner again references Ulyanov col. 16, lines 1- col. 17, 
line 67 in an attempt to show Applicant's claim element (e). We have shown that this 
passage does not disclose elements (a)-(d), above. The passage also does not disclose 
element (e) 3 especially not in the context of prior el ements (a)-( d )- Respectfully, there is 
no teaching within Ulyanov of communicating results (of executing Applicant's encoded 
program) from a host computer to a network, as in element (e) of claim 15. Ulyanov is 
also silent as to a control computer, as in element (e) of claim 1 . 

element (f) : Claims 1 and 15 also require decoding results. Claim 1 
particularly recites decoding results into output representative of executing the program 
with the data string, wherein computations and data associated with the program and data 
string are unintelligible and useless at the host computer. The Examiner contends that 
Ulyanov discloses this step at col. 15, lines 46-52. We must disagree. This passage says 
nothing about computations and data (of any type) being useless at a host computer; 
indeed, Ulyanov nowhere teaches or even suggests such encryption. On the contrary the 
Examiner's cited passage describes retranslating vectors and interpreting them directly. 

As demonstrated above, Ulyanov fails to teach claim elements (a)-(f); therefore, 
claims 1 and 15 are not anticipated. Withdrawal of the Examiner's rejection of claims 1 
and 15 is respectfully requested. 

Dependent Claims 2-14: 

Claims 2-14 depend from claim 1, either directly or through intervening claims. 
Claims 2-14 are therefore not anticipated by Ulyanov, for at least the reasons laid out 
herein above. However, we submit that these claims are further allowable over Ulyanov, 
for additional reasons exemplified herein below. 

Claims 2 and 3 : The Examiner applies Ulyanov col. 16, line 1- col. 17, line 67; 
and col. 19, line 1 - col. 20, line 44 in an attempt to show anticipation of claims 2 and 3, 
respectively. However, these passages again summarize the aforementioned "Quantum 
Theory, the Church-Turing principle and the universal quantum computer," and do not 
teach conversion of a program to a unitary matrix multiplication (as required in claims 2 
and 3), in the context of claim 1. We thus respectfully request withdrawal of the rejection 
of claims 2 and 3. 
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Claim 4 : Claim 4 requires generating two independent identically 
distributed imitary matrices X, Y from the uniform probability distribution over U n 
determined by the Haar distribution. Again, we must respectfully disagree with the 
Examiner's stance that Ulyanov teaches such generation. The passage cited by the 
Examiner describes the standard encoding of functions into unitary matrix 
multiplications. There is no discussion there or elsewhere in Ulyanov of generating 
independent, identically distributed unitary matrices from the Haar distribution. Ulyanov 
is completely silent as to the Haar distribution. We request withdrawal of the rejection of 
claim 4, for at least this reason. 

Claim 5 : Claim 5 requires computing U* as XUY* and communicating U' to 
a remote host computer over the network. Respectfully, contrary to the Examiner's 
statement, Ulyanov does not teach or discuss computing any product of the form XUY* 
where X and Y are unitary matrices, nor does Ulyanov teach communicating any results 
with another host computer. Withdrawal of the Examiner's rejection is respectfully 
requested. 

Claims 6 and 7 : Ulyanov does not teach the limitations of claim 6 or claim 7, in 
the context of claim 1. For example, Ulyanov does not teach computation of b' as Yb 5 
and communicating b' to the remote host over the network, in the context of program 
encryption and encrypted execution. As noted, the Ulyanov passage cited by the 
Examiner (Ulyanov col. 16, line 1 - col. 17, line 67) recites standard encoding of 
functions into imitary matrix multiplications. It does not recite computing an input vector 
b* as a matrix vector product, Yb. We therefore respectfully request withdrawal of the 
rejection of claims 6 and 7. 

Claims 8 and 9 : The Examiner contends that Ulyanov teaches: 

• executing encoded data strings including the steps of (a) computing the 
product of XUY* and Yb and (b) communi cating results to the 
network (claim 8), and 

• decoding the results into output, including computing X*XUb, 
external of the host computer, to determine the multiplication of Ub as 
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desired output of the program, wherein XUY* and Yb is (XUb) and 
X*XUb is obtained by matrix multiplication X*(XUb) (claim 9). 
Respectfully, Ulyanov does not teach or even mention elements (a), (b) of claim S, nor 
does Ulyanov teach decoding the results into output as recited in claim 9. The col, 16, 
line 1 - col. 17, line 64 passage cited by the Examiner does not discuss or suggest 
computing the product of encoded XUY* with encoded Yb, or communicating such 
results over any network. Furthermore, Ulyanov col 26, lines 6-42 describes the 
measurement properties associated with extracting results from a quantum computation- 
There is no mention there or elsewhere in the patent of decoding at the host computer 
encoded results that were computed on a remote computer. Withdrawal of the 
Examiner's rejections of claims 8 and 9 is thus respectfully requested. 

Claim 10 : Ulyanov coL 26, lines 6-42 is again cited, the Examiner now 
stating that the passage discloses "decoding comprising decrypting at a control computer 
connected to a network and a host computer," as in claim 10. However, this passage 
mentions neither a host computer, nor a control computer, nor a network. Further, there 
is no mention anywhere within Ulyanov of decrypting. In particular, Ulyanov does not 
even suggest decoding or decrypting results "into output representative of executing the 
program with the data string", where "computations and data associated with the program 
and data string are unintelligible and useless at the host computer" (limitations inherited 
from claim I). Ulyanov therefore cannot anticipate claim 10, thus, we respectfully 
request withdrawal of the Examiner's rejection. 

Claims 77-75 : We must again disagree with the Examiner's assertions that 
Ulyanov suggests a network comprising the Internet, a virtual private network or a LAN. 
We searched the Ulyanov patent for the terms "Internet", "web", "virtual", "private", 
"LAN" and "local area network", and found all terms conspicuously absent from the 
reference. Furthermore, as noted herein above, the Ulyanov passage cited in support of 
the Examiner's position describes standard encoding of functions. 

Furthermore, even if Ulyanov did "suggest" these limitations, such a suggestion 
would be insufficient to alone render an anticipation rejection. Pursuant MPEP 
§706.02(V); 
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"for anticipation under 35 U.S.C. §102, the reference must teach 
every aspect of the claimed invention either explicitly or impliedly. 
Any feature not directly taught must be inherently present ." 
(emphasis added) 

Regarding inherency, MPEP §21 12 states: 

"In relying upon the theory of inherency, the examiner must 
provide a basis in fact and/or technical reasoning to reasonably 
support the determination that the allegedly inherent characteristic 
necessarily flows from the teachings of the applied prior art. Ex 
parte Levy, 17 USPQ2D 1461, 1464 (Bd. Pat. App. & Inter. 
1990)/' 

In stating that Ulyanov "suggests" the features of claims 10-13, we contend that 
the Examiner admits (and we agree) that these features are not directly taught. Per MPEP 
§706.02(V), features not directly taught must be inherently present. The Examiner has 
not provided any factual or technical reasoning to support an inherently present Internet, 
virtual private or LAN network, as required per MPEP §21. 1 2, thus, inherency is not 
established and there is no anticipation of "suggested" features of claims 1 1-13. 
Withdrawal of the rejection of claims 11-13 is respectfully requested. 

Claim 14 : Claim 14 requires embedding one or more constants into an input 
data string or program, prior to encoding, to detect incorrect execution or data tampering. 

T& 1 



For example, "This can be accomplished by appending a trailing 1 



data vector b and embedding U into an (n+1) by (n+1) unitary as so that the 



, to the input 



correct output is 



Ub 
1 



Any change to X 



Ub 
1 



either through error or malicious 



tampering will result in a decoded answer that will not have exactly 1 as the trailing entry 

'Ub 



of the decoded output vector 



1 



." Specification, p. 5, ^[2, lines 3-7, 



Ulyanov does not teach such embedding. Rather, Ulyanov recites embedding an 
operator U/r "into a quantum gate G, where G is a unitary matrix." As shown throughout 
Ulyanov, JJj? is not a constant Rather, U^ "depends on the properties off. . . In some 
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sense, the unitary operator U/* calculates f when its input and output strings are encoded 
into canonical basis vectors of a complex Hilbext Space, Vf maps the vector code of 
every string into the vector code of its image by/ A squared matrix U/? on the complex 
field is unitary if and only if its inverse matrix coincides with its conjugate transpose; 
U/r' 1 =Uyr Ulyanov col. 13, line 65 - col 14, line 5. 

This is different from embedding a constant, such as a trailing 1, into an input data 
string or program. Furthermore, Ulyanov is silent as to detection of tampering or 
incorrect execution. Ulyanov therefore cannot and does not teach claim 14. We 
therefore respectfully request withdrawal of the Examiner's rejection. 

Dependent Claim 16 ; 

Claim 16 depends from claim 15, thus benefiting from like arguments. See the 
arguments presented in support of claim 15, above. Furthermore, Ulyanov does not teach 
a control computer that embeds one or more constants into a unitary matrix or data string, 
wherein the results from the host computer indicate tampering or incorrect execution of 
die encoded program. The Examinees cited passage does not teach such limitations, but 
rather describes standard encoding of a function. Ulyanov nowhere recites or even 
suggests any means for detection of tampering or incorrect execution of an encoded 
program. Withdrawal of the Examiner's rejection of claim 16 is respectfully requested. 
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CONCLUSION 



Claims 1-16 remain pending in thes 
remarks, Applicant respectfully solicits a 

No fees are believed due; however 
with this Response, please charge Deposi : 
remain, the Examiner is encouraged to te! 



Date: JLlffijzQQl* 



'402 Application. In vi ew of the above 
Notice of Allowan ce for all pending claims. 

if any fee is deemed necessary in connection 
Account No. 12-0600. Should any issues 
ephone the undersigned attorney. 

Respectfully submitted, 
LATHROP & GAGE L.C. 
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Quantum theory, the Church-Turing principle and the universal 

quantum computer 

David Deutsch* 

Appeared in Proceedings of the Royal Society of London A 400, pp. 97-1 17 (1 985)* 
{Communicated by R. Penrose, ERS. — Received 13 July 1984) 

Abstract 

It is argued that underlying the Church-Turing hypothesis there is an implicit 
physical assertion. Here, this assertion is presented explicitly as a physical prin- 
ciple: 'every finitely realizable physical system can be perfectly simulated by a 
universal model computing macliine operating by finite means' . Classical physics 
and the universal Turing machine, because the former is continuous and the latter 
discrete, do not obey the principle, at least in the strong form above. A class of 
model computing machines that is the quantum generalization of the class of Tur- 
ing machines is described, and it is shown that quantum theory and the 'universal 
quantum computer' are compatible with the principle. Computing machines re- 
sembling the universal quantum computer could, in principle, be built and would 
have many remarkable properties not reproducible by any Turing machine. These 
do not include the computation of non-recursive functions, but they do include 
'quantum parallelism 1 , a method by which certain probabilistic tasks can be per- 
formed faster by a universal quantum computer than by any classical restriction 
of it. The intuitive explanation of these properties places an intolerable strain on 
all interpretations of quantum theory other than Everett's. Some of the numerous 
connections between the quantum theory of computation and the rest of physics 
are explored. Quantum complexity theory allows a physically more reasonable 
definition of the 'complexity' or 'knowledge' in a physical system than does clas- 
sical complexity theory. 



'Current address: Centre for Quantum Compulsion, Clarendon Laboratory, Department of Physics* Parks Road, 
OXl 3PU Oxford, United Kingdom. Email: david. deutscli©qublt . org 

+ This version (Summer 1999) was edited and converted to ETgX by Wim van Dam at the Centre for Quantum Compu- 
tation. Email: wimvdam®qiibit . org 
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1 Computing machines and the Church-Tbring principle 

The theory of computing machines has been extensively developed during the last few decades. In- 
tuitively, a computing machine is any physical system whose dynamical evolution takes it from one 
of a set of 'input' states to one of a set of 'output' states. The states are labelled in some canonical 
way, the machine is prepared in a state with a given input label and then, following some motion, the 
output state is measured For a classical deterministic system the measured output label is a definite 
Amotion / of the prepared input label; moreover the value of that label can in principle be measured 
by an outside observer (the 'user 'J and the machine is said to 'compute* the function /. 

Two classical deterministic computing machines are 'computationally equivalent' under given la- 
bellings of their input and output states if they compute the same function under those labellings. But 
quantum computing machines, and indeed classical stochastic computing machines, do not 'compute 
functions' in the above sense: the output state of a stochastic machine is random with only the prob- 
ability distribution function for the possible outputs depending on the input state. The output state 
of a quantum machine, although fully determined by the input state is not an observable and so the 
user cannot in general discover its label. Nevertheless, the notion of computational equivalence can 
be generalized to apply to such machines also. 

Again we define computational equivalence under given labelling*; but it is now necessary to 
specify more precisely what is to be labelled. As far as the input is concerned, labels must be given 
for each of the possible ways of preparing the machine, which correspond, by definition, to all the pos- 
sible input states. This is identical with the classical deterministic case. However, there is an asymme- 
try between input and output because there is an asymmetry between preparation and measurement: 
whereas a quantum system can be prepared in any desired permitted input state, measurement can- 
not in general determine its output state; instead one must measure the value of some observable. 
(Throughout this paper I shall be using the Schrodinger picture, in which the quantum state is a func- 
tion of time but observables are constant operators.) Thus what must be labelled is the set of ordered 
pairs consisting of an output observable and a possible measured value of that observable (in quantum 
theory, a Hermitian operator and one of its eigenvalues). Such an ordered pair contains, in effect, the 
Specification of apossible experiment that could be made on the output, together with apossible result 
of that experiment. 

Two computing machines are computationally equivalent under given labellings if m any possi- 
ble experiment or sequence of experiments in which their inputs were prepared equivakntiy under 
the input labellings, and observables corresponding to each other under the output labellings were 
measured, the measured values of these observables for the two machines would be statistically indis- 
tinguishable. That is, the probability distribution functions for the outputs of the two machines would 
be identical. 

In the sense just described, a given computing machine M computes at most one function. How- 
ever, there ought to be no fundamental difference between altering the input state in which M is 
prepared, and altering systematically die constitution of M so that it becomes a different machine M! 
computing a different function. To formalize such operations, it is often useful to consider machines 
with two inputs, the preparation of one constituting a 'program* detennining which function of the 
other is to be computed. To each such machine M there corresponds a set C(M) of 'Al-computable 
functions'. A function / is M -computable if Ai can compute / when prepared with some program. 

The 9et C(M) can be enlarged by enlarging the set of changes in the constitution of M that 
are labelled as possible At-programs. Given tvyo machines M and M' it is possible to construct a 
composite machine whose set of computable functions contains the union of C{M) and C(M f ). 

There is no purely logical reason why one could not go on ad infinitum building more powerful 
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computing machines, nor why there should exist any function that is outside the computable set of 
every physically possible machine. Yet although logic does not forbid the physical computation of ar- 
bitrary functions, it seems that physics does. As is well known, when designing computing machines 
one rapidly reaches a point when adding additional hardware does not alter the machine's set of com- 
putable functions (under the idealization that the memory capacity is in effect unlimited); moreover, 
for functions from the integers 2 to themselves the set C(M) is always contained in C(T), where T is 
Turing's universal computing machine (Turing 1936). C(T) itself, also known as the set of recursive 
functions, is denumerable and therefore infinitely smaller than the set of al l functions from S to 

Church (1936) and Turing (1936) conjectured that these limitations on what can be computed 
are not imposed by the state-of-the-art in designing computing machines, nor by our ingenuity in 
constructing models for computation but are universal. This is called the 'Church-Turing hypothesis'; 
according to Turing, 



The conventional, non-pbysical view of (1.1) interprets it as the quasi-mathematical conjecture 
that all possible formalizations of the intuitive mathematical notion of 'algorithm' or 'computation' 
are equivalent to each other. But we shall see that it can also be regarded as asserting a new physical 
principle, which I shall call the Church-Turing principle to distinguish it from other implications and 
connotations of the conjecture (LI). 

Hypothesis (1.1) and other formulations that exist in the literature (see Hofstadter (1979) for an 
interesting discussion of various versions) are very vague by comparison with physical principles such 
as the laws of thermodynamics or the gravitational equivalence principle. But it will be seen below 
that my statement of the Church-Turing principle (1.2) is manifestly physical, and unambiguous. I 
shall show that it has the same epistemological status as other physical principles. 

I propose to reinterpret Turing's *fuuctions which would naturally be regarded as computable' as 
the functions which may in principle be computed by a real physical system. For it would surely 
be bard to regard a function 'naturally' as computable i f it could not be computed in Nature, and 
conversely. To this end I shall define the notion of 'perfect simulation \ A computing machine M 
is capable of perfectly simulating a physical system under a given labelling of their inputs and 
outputs, if there exists a program ir(S) for M that renders M computationa lly equivalent to S under 
that labelling. In other words, tt(£) converts M into a 'black box' functionally indistinguishable from 
S, 

I can now state the physical version of the Church- Turing principle: 



This formulation is both better defined and more physical than Turing's own way of expressing it (1.1), 
because it refers exclusively to objective concepts such as 'measurement', 'preparation* and 'physical 
system', which are already present in measurement theory. It avoids terminology like 'would naturally 
be regarded 1 , which does not fit well into the existing structure of physics. 

The 'finitely realizable physical systems' referred to in (1.2) must include any physical object 
upon which experimentation is possible. The 'universal computing machine' on the other hand, need 
only be an idealized (but theoretically permitted) finitely specifiable model. The labellings implicitly 
referred to in (1.2) must also be finitely specifiable. 

The reference in (LI) to a specific universal computing machine (Turing's) has of necessity been 
replaced in (1.2) by the more general requirement that this machine operate 'by finite means'. 'Finite 



Every Junction which would naturally be regarded as computable ' can be 
computed by the universal Turing machine. 



O.J) 



'Every finitely realizable physical system can be perfectly simulated by a 
universal model computing machine operating by finite means \ 



(1.2) 
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means* can be defined automatically, without restrictive assumptions about the form of physical laws 
(cf, Gandy 1980). If we think of a computing machine as proceeding in a sequence of steps whose 
duration has a non-zero lower bound, then it o >erates by 'finite means' if (i) only a finite subsystem 
(though not always the same one), is in motionjduring anyone step, and (ii) the motion depends only 
on the state of a finite subsystem, and (iii) thejrule that specifies the motion can be given finitely in 
the mathematical sense (for example as an integer). Turing machines satisfy these conditions, and so 
does the universal quantum computer Q (see §2), 

The statement of the Church-Turing principle (1.2) is stronger than what is strictly necessitated 
by (1.1). Indeed it is so strong that it is not satisfied by Turing's machine in classical physics. Owing 
to the continuity of classical dynamics, the possible states of a classical system necessarily form a 
continuum. Yet there are only countably manyjways of preparing a finite input for T. Consequently 
T cannot perfectly simulate any classical dynapical system. (The well studied theory of the 'simu- 
lation' of continuous systems by T concerns itjself not with perfect simulation in my sense but with 
successive discrete approximation.) In §3, 1 shall show that it is consistent with our present knowledge 
of the interactions present in Nature that every rpal (dissipative) finite physical system can be perfectly 
simulated by the universal quantum computer S. Thus quantum theory is compatible with the strong 
form (1.2) of the Church-Turing principle. 

I now return to my argument that (1 .2) is an empirical assertion. The usual cri terion for the empiri- 
cal status of a theory is that it be experimentally falsifiable (Popper 1959), i.e. that there exist potential 
observations that would contradict it. Howeve; since the deeper theories we call 'principles 1 make 
reference to experiment only via other theories, the criterion of falsifiability must be applied indirectly 
hi their case. The principle of conservation of energy, for example, is not in itself contradicted by any 
conceivable observation because it contains no specification of how to measure energy. The third law 
of thermodynamics whose form 



'No finite process can reduce the enfropy or temperature of a finitely realizable 
physical system to zero ' I 



(1.3) 



bears a certain resemblance to that of the Church-Hiring principle, is likewise not directly refutable; 
no temperature measurement of finite accuracy could distinguish absolute zero from an arbitrarily 
small positive temperature. Similarly, since the jiurnber of possible programs for a universal computer 
is infinite, no experiment could in general verify that none of them can simulate a system that is 
thought to be a counter-example to ( 1 ,2). 

But all this does not place 'principles' outride the realm of empirical science. On the contrary, 
they are essential frameworks within which directly testable theories are formulated. Whether or 
not a given physical theory contradicts a principle is first detenriined by logic alone. Then, if the 
directly testable theory survives crucial tests bjit contradicts the principle, that principle is deemed 
to be refuted, albeit indirectly. If all known experimentally corroborated theories satisfy a restrictive 
principle, then that principle is corroborated and becomes, on the one hand, a guide in the construction 
of new theories, and on the other, a means of understanding more deeply the content of existing 
theories. 

It is often claimed that every 'reasonable' physical (as opposed to mathematical) model for com- 
putation, at least for the deterministic computation of functions from Z to Z, is equivalent to Turing's. 
But this is not so; there is no a priori reason wjiy physical laws should respect the limitations of the 
mathematical processes we call 'algorithms' (i|e. the functioas C(T)). Although I shall not in this 
paper find it necessary to do so, there is nothir g paradoxical or inconsistent in postulating physical 
systems which compute functions not in C(T). "i 'here could be experimentally testable theories to that 
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effect: e.g. consider any recursively enumerable non-recursive set (such as the set of integers rep- 
resenting programs for terminating algorithms on a given Turing machine). In principle, a physical 
theory might have among its implications that a certain physical device T could compute in a spec- 
ified time whether or not an arbitrary integer in its input belonged to that set This theory would be 
experimentally refuted if a more pedestrian Turing-type computer, programmed to enumerate the set, 
ever disagreed with J 7 . (Of course the theory would have to make other predictions as well, otherwise 
it could never be non-trivially corroborated, and its structure would have to be such that its exotic pre- 
dictions about T could not naturally be severed from its other physical content. All this is logically 
possible.) 

Nor, conversely, is it obvious a priori that any of the familiar recursive functions is in physical 
reality computable. The reason why we find it possible to construct, say, electronic calculators, and 
indeed why we can perform mental arithmetic, cannot be found in mathematics or logic. The reason 
is that the laws of physics 'happen to ' permit the existence of physical models for the operations of 
arithmetic sitch as addition, subtraction and multiplication. If they did not, these familiar operations 
would be non-computable functions. We might still know of them and invoke them in mathematical 
proofs (which would presumably be called 'non-constructive') but we could not perform them. 

If the dynamics of some physical system did depend on a function not in C(T)» then that system 
could in principle be used to compute the function. Chaitin (1977) has shown how the truth values of 
all 'interesting* non-Turing decidable propositions of a given formal system might be tabulated very 
efficiently in the first few significant digits of a single physical constant. 

But if they were, it might be argued, we could never know because we could not check the accu- 
racy of the 'table 1 provided by Nature. This is a fallacy. The reason why we are confident that the 
machines we call calculators do indeed compute the arithmetic functions they claim to compute is not 
that we can 'check' their answers, for this is ultimately a futile process of comparing one machine 
with another Quis custodiet ipsos custodes? The real reason is that we believe the detailed physical 
theory that was used in their design. That theory, including its assertion that the abstract functions of 
arithmetic are realized in Nature, is empirical. 

2 Quantum computers 

Every existing general model of computation is effectively classical. That is, a full specification of its 
state at any instant is equivalent to the specification of a set of numbers, all of which are in principle 
measurable. Yet according to quantum theory there exist no physical systems with this property. The 
feet that classical physics and the classical universal Turing machine do not obey the Church-TYiring 
principle in the strong physical form (1 .2) is one motivation for seeking a truly quantum model. The 
more urgent motivation is, of course, that classical physics is false. 

Benioff (1982) has constructed a model for computation within quantum kinematics and dynam- 
ics, but it is still effectively classical in the above sense. It is constructed so that at the end of each 
elementary computational step, no characteristically quantum property of the model — interference, 
non-separability, or indeterminism — can be detected Its computations can be perfectly simulated by 
a Turing machine. 

Feymnan (1982) went one step closer to a true quantum computer with his * universal quantum 
simulator'. This consists of a lattice of spin systems with nearest-neighbour interactions that are 
freely specifiable. Although it can surely simulate any system with a finite-dimensional state space (I 
do not understand why Feymnan doubts that it can simulate ferrnion systems), it is not a computing 
machine in the sense of this article. 'Programming' the simulator consists o f endowing it by fiat with 
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the desired dynamical laws, and then placing ii in a desired initial state. But the mechanism that 
allows one to select arbitrary dynamical laws is not modelled. The dynamics of a true 'computer* in 
my sense must be given once and for all, and programming it must consist entirely of preparing it in 
a suitable state (or mixed case). 

Albert (1983) has described a quantum mechanical measurement 'automaton' and has remarked 
that its properties on being set to measure itself have no analogue among classical automata. Albert's 
automata, though they are not general purpose computing machines, are true quantum computers, 
members of the general class that I shall study in this section. 

In this section I present a general, fully quantum model for computation. I then describe the uni- 
versal quantum computer Q, which is capable of perfectly simulating every finite, realizable physical 
system- It can simulate ideal closed (zero temperature) systems, including all other instances of quan- 
tum computers and quantum simulators, with arbitrarily high but not perfect accuracy. In computing 
strict functions from S to Z it generates precisely the classical recursive functions C(T) (a manifesta- 
tion of the correspondence principle). Unlike T t it can simulate any finite classical discrete stochastic 
process perfectly. Furthermore, as we shall see in §3 S it as many remarkable and potentially useful 
capabilities that have no classical analogues. 

Like a Turing machine, a model quantum computer Q, consists of two components, a finite pro- 
cessor and an infinite memory, of which only a finite portion is ever used. The computation proceeds 



where Z a/ is the set of integers from 0 to M — 1. The memory consists of an infinite sequence 



Of 2-$tate observables. This corresponds to the infinitely long memory 'tape* in a Turing machine. 
I shall refer to the {hi} collectively as n, and to the {mi} as m. Corresponding to Turing's 'tape 
position' is another observable x, which has the whole of Z as its spectrum. The observable x is the 
*addjes$ 1 number of the currently scanned tape location. Since the 'tape 7 is infinitely long, but will be 
in motion during computations, it must not be rigid or it could not bo made to move *by finite means'. 
A mechanism that moved the tape according to signals transmitted at finite speed between adjacent 
segments only would satisfy the 'finite means' requirement and would be sufficient to implement what 
follows. Having satisfied ourselves that such a mechanism is possible, we shall not need to model it 
explicitly Thus the state of Q i s a unit vector in the space H spanned by the simultaneous eigenvectors 



of i, n and m, labelled by the corresponding eigenvalues x, n and m. I call (2.3) the 'computational 
baste states 1 . It is convenient to take the spectrum of our 2-state observables to be Za s i.e. the set 
{0, 1}, rather than {- ^, 4-§} as is customary in physics. An observable with spectrum {0, 1} has a 
natural interpretation as a 'one-bit' memory element. 

The dynamics of Q are summarized by a constant uniti^ry operator U on U specifies the 
evolution of any state \tp(t)) E *H (in the Schrodinger picture at time t) during a single computation 
step 




{fm} (i E Z) 



(2.2) 



\x\ n; m) = |a:; no, m • ■ • riM-\\ • • ■ m-j , mo, m\ • • •) 



(2.3) 



|V;(nT)> = U*WO)> (n € Z+) 



(2.4) 
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UtU = UUt = i. (2.5) 

We shall not need to specify the state at tiroes other than non-negative integer multiples of T. The 
computation begins at t = 0. At this time x and n are prepared with the value zero, the state of a 
finite number of the m is prepared as the 'program* and 'input' in the sense of § 1 and the rest are set 
to zero. Thus 

l'A(0)> = E m Am|0;O;m), ) 

\ (2.6) 
Eml A m| 2 =l, J 

where only a finite number of tho A m are non-zero and A m vanishes whenever an infinite number of 
the m are non-zero. 

To satisfy the requirement that Q operate 'by finite means', the matrix elements of U take the 
following form: 

<^7i';m'|U|s;n ; m) - [# +1 U+(u', m^n, m x ) + S^U'in', m f x \n, m x )] <Q 

The continued product on the right ensures that only one memory bit, the zth, participates in a single 
computational step. The terms S^ 1 ensure that during each step the tape position a? cannot change by 
more than one unit, forwards or backwards, or both. The functions £/=■= (n f j m' \n , m) , which represent 
a dynamical motion depending only on the MocaT observables n and m x , are arbitrary except for the 
requirement (2,5) that U be unitary. Each choice defines a different quantum computer, QIU" 1 ", U~]. 

Turing machines are said to halt', signalling the end of the computation, when two consecutive 
states are identical. A 'valid' program is ono that causes the machine to halt after a finite number 
of steps. However, (2.4) shows that two consecutive states of a quantum computer Q can never be 
identical after a non-trivial computation, (This is true of any reversible computer.) 

Moreover, Q must not be observed before the computation has ended since this would* in general, 
alter its relative state. Therefore, quantum computers need to signal actively that they have halted. 
One of the processor's internal bits, say ho, must be set aside for this purpose. Every valid Q-program 
sets rz Q to 1 when it temiinates but does not interact with no otherwise. Hie observable no can then 
be periodically observed from the outside without affecting the operation of Q. The analogue of the 
classical condition for a program to be valid would be that the expectation value of no must go to 
one in a finite time. However, it is physically reasonable to allow a wider class of Q-programs. A 
Q-program is valid if the expectation value of its tunning time is finite. 

Because of unitarity, the dynamics of Q, as of any closed quantum system, are necessarily re- 
versible. Turing machines, on the other hand, undergo irreversible changes during computations, and 
indeed it was, until recently, widely held that irreversibility is an essential feature of computation. 
However, Bennett (1973) proved that this is not the case by constructing explicitly a reversible classi- 
cal model computing machine equivalent to (i.e. generating the same computable function as) T (see 
also Toffoli 1979). (BeniofTs machines are equivalent to Bennett's but use quantum dynamics.) 

Quantum computers Q[U H ~, U~] equivalent to any reversible Turing machine may be obtained by 
taking 

U'Km'km) = \5$ n > m) C n ' m) [\±C{n,m)] (2.8) 

where A, B and C are functions with ranges , %2 and {—1, 1} respectively. Turing machines, in 

other words, are those quantum computers whose dynamics ensure that they remain in a computational 
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basis state at the end of each step, given that they start in one. To ensure unitarity it is necessary and 
sufficient that the mapping 

{(n,m)} > {(A(n ) m) 1 B(n 1 m),C[rh,m))} (2.9) 

be bijective. Since the constitutive functions A, B and C are otherwise arbitrary there must, in 

particular, exist choices that make Q equivalent to a universal Turing machine T, 

To describe the universal quantum computer Q directly in terms of its constitutive transformations 
would be possible, but unnecessarily tedious. The properties of Q are better defined by resorting 

to a higher level description, leaving the explicit construction of as an exercise for the reader. )n 

the following I repeatedly invoke the 'universal' property of T. 

For every recursive function / there exists a program ir(f) for T such that when the image of 

tt(/) is followed by the image of any integer i in the input of T, T eventually halts wiih 7r(/) and i 

themselves followed by the image of /(£), with all other bits still (or again) set to zero. That is, for 

some positive integer n 

U n |0;O ;7 r(/),i,O) = |0; l,0;7r(/),»\/(t^O>. (2.10) 

Here 0 denotes a sequence of zeros* and the zero eigenvalues of (a < 0) are not shown explicitly. 
T loses no generality if it is required tiiat every program allocate the memory as an infinite sequence 
of 4 sIots\ each capable of holding an arbitrary integer. (For example, the ath slot might consist of the 
bits labelled by successive powers of the ath prime.) For each recursive function / and integers a, b 
there exists a program 7r(/, a, b) which computes the function / on the contents of slot a and places 
the result in slot b, leaving slot a unchanged. If slot b does not initially contain zero, reversibility 
requires that its old value be not overwritten but combined in some reversible way with the value of 
the function. Thus, omitting explicit mention of everything unnecessary, we may represent the effect 
of die program ir by 

flint I s ] Q t 2 aUH3 

where © is any associative, commutative operator with the properties 

(2.12) 



i@0 = i > J 



(the exclusive-or function, for example, would be satisfactory). I denote by m - -k^ the concatenation 
of two programs 7Ti and 7T2 ? which always exists when ir\ and tt2 are valid programs; 7ri - 7r2 is a 
program whose effect is that of 7rj followed by ir 2 . 

For any bijective recursive function g there exists a program <p{g^ a) whose sole effect is to replace 
any integer x in slot a by g(t). The proof is immediate, for if some slot b initially contains zero, 



),a) » 7r(g,a,b) •7r(g~ 1 i b i a) ^{l 1 b 1 Q,) "K(I,a,b). (2.13) 

Here J is the 'perfect measurement' function (Deutsch 1985) 

|7r(/,2,3),i,j) -+ |7r(J,2,3),'*\;?®z). (2.14) 

The universal quantum computer Q has all the properties of T just described, as summarized in 
(2.10) to (2.14). But Q admits a further class of programs which evolve computational basis states 
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into linear superpositions of each other. All programs for Q can be expressed in terms of the ordinary 
Taring operations and just eight further operations. These are unitary transformations confined to a 
single two-dimensional Hilbcrt space /C, the state space of a single bit. Such transformations form a 
four (real) parameter family. Let a» be any irrational multiple of ir> Then the four transformations 



y _ / cos<* sinat \ \J — ( casa istora \ 
0 ~~ ^ -sin a cos a ) 1 1 ~ \ iaino; cos or J ' 



(2.15) 



and their inverses V 4 , V5, Ve, Vr, generate, under composition, a group dense in the group of all 
unitary transformations on U. It is convenient, though not essential, to add two more generators 

Vs = 7i(-i 0 " nd V9 = 7i0 !)• (2,16) 

which corresponds to 90° 'spin rotations'. To each generator V, there correspond computational basis 
elements representing programs 0(Vt,a), which perform V; upon the least significant bit of the ath 
slot. Thus if? is zero or one, these basis elements evolve according to 

i 

wv<,2),i> 53wb">i^« 2 )'*>- (2 - I7) 

Composition of the V; may be effected by concatenation of the $(Vi, a). Thus there exist programs 
that effect upon the state of anyone bit a unitary transformation arbitrarily close to any desired one. 

Analogous conclusions hold for the joint state of any finite number L of specified bits. This is 
not a trivial observation since such a state is not necessarily a direct product of states confined to 
the Hilbert spaces of the individual bits, but is in general a linear superposition of such products. 
However, I shall now sketch a proof of the existence of a program that effects a unitary transformation 
on L bits, arbitrarily close to any desired unitary transformation. In what follows, 'accurate' means 
'arbitrarily accurate with respect to the inner product norm'. The case L = 1 is trivial. The proof for 
L bits is by induction. 

First note thattbe {2 L )\ possible permutations of the 2 L computational basis states of L bits are 
all invertible recursive functions, and so can be effected by programs for T, and hence for Q. 

Next we show that it is possible for Q to generate 2 L -dimensional unitary transformations di- 
agonal in the computation basis, arbitrarily close to any transformation diagonal in that basis. The 
(L — l)-bit diagonal transformations, which are accurately Q-computable by the: inductive hypoth- 
esis, are generated by certain 2^-dimensional diagonal unitary matrices whose eigenvalues all have 
even degeneracy. The permutations of basis states allow Q accurately to effect every diagonal unitary 
transformation with this degeneracy. The closure of this set of degenerate transformations under mul- 
tiplications is a group of diagonal transformations dense in the group of all 2 L -dimensional diagonal 
unitary transformations. 

Next we show that for each L-bit state there exists a (^-program p(\ip)) which accurately 
evolves |^) to the basis state |0jr,) in which all L bits are ssro. Write 

\'<fi) = c o |0)Wo> + Ci|l)|0i>, (2.18) 

where |7/; 0 ) and |t/>i) are states of the L - 1 bits numbered 2 to L. By the inductive hypothesis there 
exist Q-programs po and pi which accurately evolve |^q) and \*fn)> respectively, to the {L — l)-fo!d 
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product |Ojc— j.)- Therefore there exists a Q-program with the 
execute pa otherwise execute pi . This converts (2.18) accurately 

(co\0) + c x \1))\Ql- X ). 



fallowing effect. If bit no. 1 is a zero, 
to 



ex jcuting 



i effi set 



Then (2.19) can be evolved accurately to |0/,) by a transformatitm 
Finally, an arbitrary 2 L -dimensional transformation U is accqnately 

forming each eigenvector (7/)) of U accurately into |0i) (by 

performing a diagonal unitary transformation which accurately 

phase factor) con-esponding to but has arbitrarily little 

state, and then executing p(\tp)). 

This establishes the sense in which Q is a universal quanfum 

arbitrary precision any other quantum computer Q(U + , U~]. 

an infinite-dimensional state space, only a finite-dimensional unitary 

at every step to simulate its evolution. 



3 Properties of the universal quantum computer 



cm 



We have already seen that the universal quantum computer Q 
chine and can simulate with arbitrary precision any quantum corhputer 
how Q can simulate various physical systems, real and theoretic ll 
uni versal Turing machine T> 



Random numbers and discrete stochastic systems 

As is to be expected, there exist programs for Q winch generate 
when the program 

0(V a> 2)-*(J,2,a) 



halts, slot a contains with probability § either a zero or a one. I 
can generate other probabilities, including any probability that is 
not exhaust the abilities of Q. So far, all our programs have been, 
cause the 'output 1 part of the memory to enter non-compiitatiom 
first quantum program. The execution of 



— |7r{/,2, fl ))(co^|O)+ 0 in4|l» 



cXISt 



yields in slot a s a bit that is zero with probability cos 2 0. The whole 
(3.2) are valid programs for Q. In particular, valid programs exisfl with 
cos 2 0 and sin 2 0. It follows that every discrete finite stochastic 
distribution function is T-computable, can be perfectly simulate{l 
to a 'hardware random number generator' (which cannot really 
(Bennett 1981) it could not match this. However, it could get arbftraiily 
T nor any cJassical system whatever, including stochastic ones, 
next property of Q. 



10 

Appendix A 



(2.19) 

of bit no. 1. 

effected by successively trans- 
the program p" 1 (\if>))), then 
multiplies |0r„) by the eigenvalue (a 
on any other computational basis 



computer. It can simulate with 
although a quantum computer has 
transformation need be effected 



perfectly simulate any Turing ma- 
or simulator. I shall now show 
, which are beyond the scope of the 



true random numbers. For example, 



(3.1) 

erative programs incorporating (3.1) 
a recursive real. However, this does 
per se, classical, though they may 
1 basis states. We now encounter our 



(3.2) 



continuum of states of the form 
arbitrary irrational probabilities 
ystem, whether or not its probability 
by Q. Even if T were given access 
classically) or a 'random oracle 7 
close to doing so. But neither 
san even approximately simulate the 
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Quantum correlations = 

The random number generators (3.1) anil (3*2) differ slightly from the other programs I have so far 
considered in that they necessarily produce 'waste' output. The bit in slot a is, strictly speaking, 
perfectly random only if the contents of slot 2 are hidden from the user and never again participate in 
computations. The quantum program (3.2) can be used only once to generate a single random bit. If 
it were re-used the output would contain non-random correlations. 

However, in some applications, such correlations are precisely what is required. The state of slots 
2 and a after the execution of (3.1) is the ^non-separable' (d'Espagnat 1976) state 

|=(|0)|0)-h|l)|l)). (33) 

Consider a pair of programs that swap these slots into an output region of the tape, one at a time. That 
is, if the output is at first blank, 

-L(|o)|o> + |i>|i»|o>|n), (3.4) 

execution of the first program halts with ; 

^(0)(|0>|0>+|1)|1))|0), (3.5) 
and, execution of the second program halts with 

~jo>|0)(|0)|0) + |l>|l>). (3.6) 

An equivalent program is shown explicitly at the end of §4. Bell's (1964) theorem tells us that no 
classical system can reproduce the statistical results of consecutive measurements made on the output 
slots at times (3.5) and (3.6). (Causing the output to appear in two steps with an opportunity for the 
user to perform an experiment after each step is sufficient to satisfy the locality requirement m Boil's 
theorem.) 

The two bits in (3.3) can also be used.as 'keys' for performing 'quantum cryptography" (Bennett 
eta!. 1983). | 

i 

Perfect simulation of arbitrary finite physical systems 

The dynamics of quantum computers, though by construction 'finite', are still unphysical in one im- 
portant respect; the evolution is strictly unitary. However, the third law of thermodynamics (1.3) im- 
plies that no realizable physical system can be prepared in a state uncorrelated with systems outside 
itself, because its entropy would then be jzero. Therefore, every realizable physical system interacts 
with other systems, in certain states. But the effect of its dynamical coupling to systems outside itself 
cannot be reduced to zero by a finite process because the temperature of the correlation degrees of 
freedom would then have been reduced to zero. Therefore there can be no realizable way of placing 
the system in states on which the components of the time evolution operator which mix internal and 
external degrees of freedom have no effect 

A faithful description of a finitely realizable physical system with an L-dimension»l state space H 
cannot therefore be made via state vectors in H hut must use density matrices pj\ Indeed, all density 
matrices are in principle allowed except (thanks to the 'entropy' half of the third law (1.3)) pure cases. 
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The dynamics of such a system are generated not by a unitary operator but by a superscatterirtg matrix 

$: 

pJ>(T) = ^n^pAQ). < 3 - 7 > 

It is worth stressing that I am not advocating non-unitary dynamics for the universe as a whole, 
which would be a heresy contrary to quantum theory. Equation (3.7) is, of course, merely the projec- 
tion into U of unitary evolution in a higher state space U x U\ where W represents as much of the 
rest of the universe as necessary. Roughly speaking (the systems are far from equilibrium) W plays 
the role of a 'heat bath'. 

Thus the general superscattering operator has the form 

= E U^''U tC W'\ (3.8) 

where U a6 i is a unitary operator anHxW, that is 

EU^'U^c* - 6**6*?* (3-9) 

which does not decompose into a product of operators on U and (Raising and lowering of indices 
denotes complex conjugation.) The term p,/' has an approximate interpretation as the initial density 
matrix of the 'heat bath', which would be strictly true if the system, the heat bath, and the entity 
preparing the system in its initial state were all uncorrected initially. Let us rewrite (3.8) in the 
T^'-basis in which p is diagonal : 

***** = E^^'^V' 

E^ = i. <?w 

where the probabilities P a * are the eigenvalues of p. The set G of all superscattering matrices (3-8) or 
(3.10) lies in a subspace Jof'Hx'H*xH"x'H i namely the subspace whose elements satisfy 

a 

Every element of G satisfies the constraints 

o < E /» (1 WV 2) / < i < 312 > 

for arbitrary density matrices p^ and 

The inequality on the left in (3.12) can be an equality only if the states of *K form disjoint subsets 
with strictly zero probability so that thermal noise can effect a transition between them. This is 
impossible unless there are superselection rules forbidding such transitions, a possibility that we lose 
no generality by excluding because only one stiperselected sector at a time can be realized as a physical 
system. The inequality on the right becomes an equality precisely in the unitary case 

ta*a = U/U^, (3.13) 
12 
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which is unphysical because it represents perfectly non-dissipative evolution. Thus the set of phys- 
ically realizable elements of G- is an open set in J. Moreover, for any *W and $< 2 > that are in- 
computable the convex linear combination 

PiS (1) +PaS (2) ,. (3.14) 

where pi and Pi are arbitrary probabilities, is also; computable, thanks to the random number generator 
(3.2). By computing unitary transforiTiations as in (3.10), every element of a certain countable dense 
subset of G can be computed. But every point in any open region of a finite-dimensional vector space 
can be represented as a finite convex linear combination of elements of any dense subset of that space. 
It follows that Q, can perfectly simulate any physical system with a finite-dimensional state space. 
Therefore quantum theory is compatible with rite Church-Turing principle (1.2). 

The question whether all finite systems in the physical universe can likewise be simulated by Q 7 
— i.e. whether (1.2) is satisfied in Nature — must remain open until the state space and dynamics 
of the universe are understood better. What littte is known seems to bear out the principle. If the 
theory of the thermodynamics of black holes is trustworthy, no system enclosed by a surface with an 
appropriately defined area A can have more thau a finite number (Bekeostein 1981) 

N(A) » exp(/lc 3 /4/K?) (3.15) 

of distinguishable accessible states (ft is the Planck reduced constant, G is the gravitational constant 
and c is the speed of light). That is, in a suitable basis the system can be perfectly described by using 
an iV(4)-diraensional state space, and hence perfectly simulated by Q. 

Parallel processing on a serial computer 

Quantum theory is a theory of parallel interfering universes. There are circumstances under which 
different computations performed in different universes can be combined by Q giving it a limited 
capacity for parallel processing. Consider the quantum program 

1 N 

^£K/\2,3),i,0), (3.16) 

which instructs Q in each of N universes to compute f(-i)\ t for i from 1 to N. Linearity and (2.11) 
imply that after executing (3. 1 6) Q halts in the state 

-±=J^\*UA 3), *,/(*)>. (3.17) 

Although this computation requires exactly the same time, memory space and hardware as (2.1 1), the 
state (3.17) contains the results of an arbitrarily large number N of separate computations. Unfortu- 
nately, at most one of these results is accessible in each universe. If (3.16) is executed many times, 
the mean time required to compute all N values /(**), which I shall refer to collectively as f\ is at 
least that required for (2.1 1) to compute all of them serially. I shall now show that the expectation 
value of the time to compute any non-trivial AT-fold parallelizable function G(f) of all N values / 
via quantum parallelism such as (3.16) cannot be less than the time required to compute it serially via 
(2.31). 

For simplicity assume that r , the running time of (2. 1 1 ), ;is independent of i and that the time taken 
to combine all the / to form G(f) is negligible compared with r. Now suppose that there exists a 
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program <, which for any function / (attracts the value of G(f) from (3.17) in a negligible time and 
with probability |/?| 2 . That is, £ has the effect 

4=£>/W) /3|O,G(/)) + V / lH0P|l>|A(/)>, (3-18) 

where the states |A(/)) contain no information about Then the first slot could be measured. 
If it contained zero, the second slot would contain G{f). Otherwise the information in (3.17) would 
have been lost and it would have to be recomputed. Unitarity implies 



-y>/W..9(0) = \0\ 2 S(G(f),G(g)) + (l-\/3\ 2 )(Mf)\\te)) (3.19) 



for any functions g (i) and f(i). 

If G(f) is not a constant function then for each function /(a) there exists another function g(i) 
such that G{g) ^ G(f) t but g{i) = f(i) for all but one value of i between 1 and N. For this choice 

1-1 = (l-|/J| 9 )(A(/)|Ato)) t (3.20) 

whence it follows that |/9| 2 < 1/7V*. Thus the mean time to compute G(f) must be at least t/\{3\ 2 = 
Nr. This establishes that quantum parallelism cannot be used to improve the mean running time of 
parallelizable algorithms. As an example of quantum parallelism for N = 2, let 

G(f) m /(0)©/{l), (3.21) 

(see equations (2.12)). Then the state (3.17) following the quantum parallel computation has 

^(|0,/(0)) + |1,/(1)» (3-22) 



as a factor. A suitable program C to 'decode* this is one that effects a measurement of any non- 
degenerate observable with eigenstates 



|zero) = ftC|0,0> - |0, 1> + |1,0> - |l a l», 

|one) = I(|0,0>-|(U>-|M> + |M>)> 

|fail) = }(|0 > 0) + |0 J l> + |l ? 0> + |l 1 l» f 

|error) - §(|0,0> + |0, 1> HM> H-U>). J 



(3.23) 



Such an observable exists, since the states (3.23) form an orthonormal set. Furthermore, the mea- 
surement can be made in a fixed time independent of the execution time of rhe algorithm computing 
/. If the outcome of the measurement is 'zero' (i.e. the eigenvalue corresponding to the state |zero)) 
or 'one' then it can be inferred that /(0) © /(I) is zero or one respectively. Whatever the form of 
the function /, there will be a probability 1/2 that the outcome will be 'fail', in which case nothing 
can be inferred about the value of /(0) © /(l). The probability of the outcome 'error' can be made 
arbitrarily small with a computational effort independent of the nature of/. 

In this example the bound Mr for the running time has been attained. However, for j?V > 2 1 have 
been unable to construct examples where the mean running time is less dian [N 2 — 2N + 2)r, and 
I conjecture that this is the optimal lower bound. Also, although there exist non-trivial examples of 
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quantum parallelizable algorithms for all N, when N > 2 there are none for which the junction G (/) 
has the set of all 2* possible graphs of / as its. domain. 

In practical computing problems, especially in real time applications, one may not be concerned 
with minimizing specifically the mean running time of a program: often it is required that the min- 
imum or maximum time or some more complicated measure he rrnnimized. In such cases quantum 
parallelism may come into its own. I shall give two examples. 

(1) Suppose that (3.17) is a program to estimate tomorrow's Stock Exchange movements given 
today's, and G(f) specifies the best investment strategy. If r were one day and JV 2, the classical 
version of this program would take two days to run and would therefore be useless. If the quantum 
version was executed every day, then on one day in two on average slot 1 would contain the measured 
value 1 1\ mdicating a failure. On such days one would make no investment. But with equal average 
frequency a zero would appear, indicating that slot 2 contained the correct value of the investment 
strategy G(f). G(f), which incorporates the result of two classical processor-days of computation, 
would on such occasions have been performed: by one processor in one day. 

One physical way of describing this effect is that when the subtasks of an iV-fold parallel task are 
delegated to N 2 - 2N + 2 universes, at most one of them can acquire the overall result. 

(2) Now consider the problem of the design of parallel iiifonuation-processing systems which 
are subject to noise. For example, suppose that it is required, within a fixed time r, to compute a 
certain iV-fold parallelizable function G{f ). NR processors are available, each of which may fail for 
reasons of thermal noise, etc. with probability p. for simplicity assume that such a hardware error can 
be reliably detected. The problem is to minimize the overall failure rate q. 'Classically 1 (i.e. without 
using quantum parallelism) one minimizes q by means of an fi-fold redundancy: R processors are 
instructed to perform each of the N parallel subtasks. The machine as a whole will therefore fai l to 
compute the result in time only when all R processors assigned to anyone subtask fail, and this occurs 
with probability 

Od^ical = 1-(1 (3.24) 

Using quantum parallelism, however, each of the NR available processors may be given all N 
tasks. Each is subject to two independent causes of failure, (i) the probability p that it will fail for 
hardware reasons, and (ii) the probability, which as I have indicated will for certain G(f) be 1 - 
l/(iV 2 — 2N -f 2), that it will end up in a different universe from the answer. It takes only one of the 
NR processors to succeed, so the failure rate i3 



^quantum — 



1-P 



(3.25) 



N* — 2N H- 2 

a number which, for suitable values of p„ N and R, can be smaller than (3.24). 
Faster computers 

One day it will become technologically possible to build quantum computers s perhaps using flux 
quanta (Likharev 1982; Leggett 1985) as the fundamental components. It is to be expected that such 
computers could operate at effective computational speeds in excess of Turing-type machines built 
with the same technology . This may seem surprising since I have established that no recursive 
function can be computed by Q on average more rapidly with the help of quantiun programs than 
without. However, the idealizations in Q take no account of the purely technological fact that it is 
always easier in practice to prepare a very large number of identical systems in the same state than to 
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prepare each in a different state. It will therefore be possible to use a far higher degree of redundancy 
R for parallel quantum programs than for classical ones running on the same basic hardware. 

Interpretational implications 

I have described elsewhere (Deutsch 1985; cf. also Albert 1983) bow it would be possible to make a 
crucial experimental test of the Everett ("many- inverses') interpretation of quantum theory by using a 
quantum computer (thus contradicting the widely held belief that it is not experimentally distinguish- 
able from other inteq^retations). However, the performance of such experiments must await both the 
construction of quantum computers and the development of true artificial intelligence programs, fn 
explaining the operation of quantum computers t have, where necessary, assumed Everett's ontology. 
Of course the explanations could always be 'translated' into the conventional interpretation, but not 
without entirely losing their explanatory power. Suppose, for example, a quantum computer were 
programmed as in the Stock Exchange proble n described Each day it is given different data. The 
Everett interpretation explains well how the ccmputer's behaviour follows from its having delegated 
subtasks to copies of itself in other universes. On the days when the computer succeeds in performing 
two processor-days of computation, how would the conventional interpretations explain the presence 
of the correct answer? Where was it computed? 

4 Further connections between physics and computer science 
Quantum complexity theory 

Complexity theory has been mainly concerned with constraints upon the computation of functions: 
which functions can be computed, how fast, and with use of how much memory. With quantum 
computers, as with classical stochastic computers, one must also ask 'and with what probability?'. 
We have seen that the minimum computation lime for certain tasks can be lower for Q than for T, 
Complexity theory for Q deserves further investigation. 

The less immediately applicable but potentially more important application of complexity theory 
has been in the attempt to understand the spontaneous growth of complexity in physical systems s for 
example the evolution of life, and the growth oifknowledge in human minds. Bennett (1983) reviewed 
several different measures of complexity (or 'depth', or "knowledge') that have been proposed. Most 
suffer from the fatal disadvantage that they sssign a high 'complexity* to a purely random state. 
Thus they do not distinguish true knowledge from mere information content. Bennett has overcome 
this problem. His 'logical depth' is roughly tl e running time of the shortest T-prograrn that would 
compute a given state 0 from a blank input, .ogical depth is at a minimum for random states. Its 
intuitive physical justification is that the 'likeliest explanation 1 why a physical system might be found 
to be in the state vp is that ij> was indeed 'computed' from that shortest T-program. In biological 
temiinology, logical depth measures the araoujnt of evolution that was needed to evolve $ from the 
simplest possible precursors. 

At first sight Bennett's construction seems to lose this physical justification when it is extended 
beyond the strictly deterministic physics of Tu *ing machines. In physical reality most random states 
are not generated by long programs* (i.e. precursors whose complexity is near to their own), but 
by short programs relying on indeterministic lardware. However, there is a quantum analogue of 
Bennett's idea which solves this problem. Let us define the Q-logical depth of a quantum state as the 
mnning time of the shortest Q-prograra that would generate the state from a blank input (or, perhaps, 
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as Bennett would have it, the harmonic mean of the running tunes of all such programs). Random 
numbers can be rapidly generated by short Q-programs. 

Notice that the Q-logical depth is not even in principle an observable, because it contains infor- 
mation about all universes at once. But this makes sense physically: the Q-logical depth is a good 
measure of knowledge in that it gives weight only to complexity that is present in all universes, and 
can therefore be assumed to have been put there 'deliberately' by a deep process. ObservationaUy 
complex states that are different in different universes are not truly deep but just random. Since the 
Q-logical depth is a property of the quantum state (vector), a quantum subsystem need not necessarily 
have a well defined Q-logical depth (though often it will to a good degree of approximation). This is 
again to be expected since the knowledge in a system may reside entirely in its correlations with other 
systems. A spectacular example of this is quantum cryptography. 

Connections between the Church-Turing principle and otber parts of physics 

We have seen that quantum theory obeys the strong form (1.2) of the Church-Turing principle only 
on the assumption that the third law of thennodynamics (1.3) is true. This relation is probably better 
understood by considering the Church-Turing principle as more fundamental and deriving the third 
law from it and quantum theory. 

The fact that classical physics does not obey (1.2) tempts one to go further. Some of the features 
that distinguish quantum theory from classical physics (for example the discreteness of observables?) 
can evidently be derived from (1.2) and the laws of thermodynamics alone. The new principle has 
therefore given us at least part of the solution to Wheeler's problem 'Why did quantum theory have to 
be?' (see, for example, Wheeler 1985). 

Various 'arrows of time' that exist in different areas of physics have by now been connected and 
shown to be different manifestations of the same effect. But, contrary to what is often asserted, the 
'psychological* or' epistemologicar arrow of time is an exception. Before Bennett (1973) it could 
be maintained that computation is intrinsically irreversible, and since psychological processes such 
as the growth of knowledge are computations, the psychological arrow of time is necessarily aligned 
with the direction in which entropy increases. This view is now untenable, the alleged connection 
fallacious. 

One way of reincorporating the psychological arrow of time in to physics is to postulate another 
new principle of Nature which refers directly to the Q-logical depth. It seems reasonable to assert, for 
example, that the Q-logical depth of the universe is at a minimum initially. More optimistically the 
new principle might require the Q-logical depth to be non-decreasing. It is perhaps not unreasonable to 
hope that the second law of thermodynamics might be derivable from a constraint of this sort on the Q- 
logical depth. This would establish a valid connection between the psychological (or epistemological, 
or evolutionary) and thermodynamic 'arrows of time'. 

Programming physics 

To view the Church-Turing hypothesis as a physical principle does not merely make computer science 
a branch of physics. It also makes part of experimental physics into a branch of computer science. 

The existence of a universal quantum computer Q implies that there exists a program for each 
physical process. In particular, Q can perform any physical experiment. In some cases (for example 
measurement of coupling constants or the form of interactions) this is not useful because the result 
must be known to write the program. But, for example, when testing quantum theory itself, every 
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experiment is genuinely just the running of a Q-program. The execution on Q of the following 
algol 68 program is a performance of the Einstein-Podotski -Rosen experiment: 



begin 

int n = 8 * random; 

bool rr 5 y; 

x := y := false; 

* eorab y; 



% random integer from 0 to 7 % 

% booty are 2-$tate memory elements % 

% an irreversible preparation % 

% jee equation (2 .1 5) % 

% perfect measurement (2 J 4) % 

% measure y in random direction % 

% and x in the parallel direction % 



then /OTntfCQuantum theory refuted. 11 )) 
else /W/j*(("Quanttim theory corroborated")) 



end 



Quantum computers raise interesting problems for the design of programming languages, which 
I shall not go into here. From what I have said, programs exist that would (in order of increasing 
difficulty) test the Bell inequality, test the linearity of quantum dynamics, and test the Everett inter- 
pretation. I leave it to the reader to write them. 



I wish to thank Dr C. H. Bennett for pointing out to me that the Church-Turing hypothesis has 
physical significance, C. Penrose and K. Wolf for interesting discussions about quantum computers, 
and Professor R. Penrose, F.R.S., for reading an earlier draft of the article and suggesting many im- 
provements. 

This wodc was supported in part by N.S.F, grant no. PHY 8205717. 
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^BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 
□/ GRAY SCALE DOCUMENTS 



U LINES OR MARKS ON ORIGINAL DOCUMENT 
□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 



IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 
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